#cwe-287

共收录 1099 条相关情报。

← 返回所有主题
漏洞预警2026-05-04 发布INFO

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation...

CVE-2026-7723

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布INFO

A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. Performing a manipu...

CVE-2026-7722

A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/heal

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-04 发布MEDIUM

A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component...

CVE-2026-7714

CVE-2026-7714 影响 Calibre-Web-Automated 4.0.6 及更早版本,该软件是一个基于 Calibre 的电子书管理自动化工具。漏洞位于 cps/cwa_functions.py 文件的 Admin Endp

历史摘要 · 未重新核验 · NVD

安全公告2026-05-04 发布INFO

A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function...

CVE-2026-7710

A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-04 发布INFO

A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component ...

CVE-2026-7710

A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the

历史摘要 · 未重新核验 · NVD

安全公告2026-05-03 发布INFO

A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the...

CVE-2026-7679

A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-03 发布INFO

A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruo...

CVE-2026-7679

A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the

历史摘要 · 未重新核验 · NVD

安全公告2026-05-02 发布INFO

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the...

CVE-2026-7630

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallService

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-02 发布HIGH

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallS...

CVE-2026-7630

CVE-2026-7630 影响 innocommerce 开发的 InnoShop 电子商务平台(版本 ≤0.7.8)。漏洞位于安装组件的 InstallServiceProvider::boot 函数(文件 innopacks/inst

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation

CVE-2026-42560

### Summary The Patreon OAuth provider maps every authenticated Patreon account to the same local `user.ID`, instead of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-29 发布INFO

Admidio: OIDC Token Introspection Endpoint Returns Active for All Tokens Without Validation

CVE-2026-41671

## Summary The OIDC token introspection endpoint (`/modules/sso/index.php/oidc/introspect`) always returns `{"active":

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

CoreDNS has TSIG authentication bypass on gRPC and QUIC transports

CVE-2026-35579

### Summary The gRPC, QUIC, DoH, and DoH3 transports in CoreDNS incorrectly handle TSIG authentication. For gRPC and Q

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC

CVE-2026-33190

### Summary CoreDNS' tsig plugin can be bypassed on non-plain-DNS transports because it trusts the transport writer's Ts

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-27 发布INFO

Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS transport...

CVE-2026-41081

Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webh...

CVE-2026-7113

A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check_auth of the file gateway/platforms/api_server.py of the ...

CVE-2026-7112

A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-02 发布HIGH

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 and C210 v3 was identified, due to inconsistent parsi...

CVE-2026-34121

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v

来源摘录 · NVD

漏洞预警2023-12-13 发布MEDIUM

Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.

CVE-2023-49646

Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial o

来源摘录 · NVD

漏洞预警2013-07-31 发布HIGH

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between satellites, does not properly verify the authenticity of...

CVE-2013-2056

A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between

来源摘录 · NVD